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Abstract. We study several problems related to properties of non-negative matrices that arise 
at the boundary between quantum and classical probabilistic computation. Our results are twofold. 
First, we identify a large class of quantum Hamiltonians describing systems of qubits for which the 
adiabatic evolution can be efficiently simulated on a classical probabilistic computer. These are 
stoquastic local Hamiltonians with a "frustration free" ground-state. A Hamiltonian belongs to this 
class iff it can be represented as H = ^2 a where (1) every term Ha acts non-trivially on a 
constant number of qubits, (2) every term Ha has real non-positive off-diagonal matrix elements in 
the standard basis, and (3) the ground-state of i? is a ground-state of every term Ha- Secondly, 
we generalize the Cook-Levin theorem proving NP-completeness of the satisfiability problem to the 
complexity class MA — a probabilistic analogue of NP. Specifically, we construct a quantum version 
of the fe-SAT problem which we call "stoquastic fc-SAT" such that stoquastic fc-SAT is contained in 
MA for any constant k, and any promise problem in MA is Karp-reducible to stoquastic 6-SAT. This 
result provides the first non-trivial example of a MA-complete promise problem. 
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1. Introduction. Recent years have seen the first steps in the development of 
a quantum or a matrix-valued complexity theory. Such complexity theory is inter- 
esting for a variety of reasons. Firstly, it increases our understanding of fundamental 
limitations imposed on computational devices by the laws of physics. Secondly, since 
quantum computation is an extension of classical computation, quantum complexity 
theory provides a framework and a new angle to attack major problems in classical 
complexity theory, see for instance [1] . 

The problems for which a solution can be efficiently found on a quantum computer 
constitute the class BQP — the quantum analogue of the classical class BPP. On the 
other hand, the problems for which a solution can be efficiently verified on a quantum 
computer constitute the class QMA — the quantum analogue of the class MA. It was 
realized recently that one can learn a lot about the classes BQP and QMA by studying 
ground-state properties of local Hamiltonians. Firstly, Aharonov et al. P] proved that 
any quantum algorithm can be executed via quantum adiabatic evolution in which 
parameters of a local Hamiltonian are changed adiabatically while the state of the 
quantum computer is encoded into the instantaneous ground-state. Secondly, it was 
shown by Kitaev [3] that determining the ground-state energy of a local Hamiltonian 
is a problem complete for the class QMA, see [H [SJ E] for some recent progress. 

In this paper we present a large family of local Hamiltonians for which quantum 
adiabatic evolution can be efficiently simulated by a classical probabilistic algorithm 
while determining the ground-state energy is a problem complete for the class MA 
(considered as a class of promise problems). To introduce this family of Hamiltonians 
let us start from setting up some terminology. The Hilbert space of n qubits equipped 
with the standard basis x G E", will be denoted as Q". Here and below we 

denote as S" — {0, 1}" the set of n-bit binary strings. 

Definition 1.1. A k-local Hamiltonian acting on n qubits is a Hermitian oper- 
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ator H on a Hilbert space Q" representable as H = X)a=i where every term Ha 
acts non-trivially only on some subset of k or less qubits. We shall consider families 
of k-local Hamiltonians in which k = 0{\), M < poly{n), and \\Ha\\ < poly{n). 

We shall often use the terms fc-local Hamiltonian and local Hamiltonian inter- 
changeably. 

Definition 1.2. A local Hamiltonian H — X^a-^a called frustration- free if Ha 
are positive semi-definite operators and the ground-state of H is a zero eigenvector of 
all operators Ha- 

Definition 1.3. A local Hamiltonian H ~ Ha is called stoquastic with respect 
to a basis B iff all Ha have real non-positive off- diagonal matrix elements in the basis 
B. 

Throughout this paper we shall consider Hamiltonians that are stoquastic with 
respect to the standard basis of n qubits formed by tensor products of |0) and |1) 
states. The term "stoquastic" was introduced in [7] to emphasize a connection with 
both stochastic matrices and quantum Hamiltonians. The problem of determining the 
ground-state energy of a stoquastic local Hamiltonian is contained in the complexity 
class AM (Arthur-Merlin games), see |71 for details. 

In the present paper we shall focus on stoquastic frustration-free (SFF) Hamil- 
tonians. Some examples of SFF Hamiltonians will be given in Section [31 These 
examples demonstrate that SFF Hamiltonians arise naturally at the boundary be- 
tween quantum computation and classical probabilistic computation or, in physics, at 
the boundary between classical statistical mechanics and quantum mechanics. 

1.1. Summary of results. Our first result concerns the computational power 
of adiabatic quantum evolution with SFF Hamiltonians. Let Hin and Hf be SFF 
Hamiltonians acting on n qubits. We assume that Hin and Hf can be connected by 
an adiabatic path H{s), < s < 1, such that Hin — H{0), Hf — H{1). In addition 
the following conditions should be met 

(AO) Hamiltonians H{s) are stoquastic and frustration-free for all s. 
(Al) The path is sufficiently smooth; J = max^ \\dH (s) / ds\\ < poly{n). 
(A2) The Hamiltonian H{s) has a non-degenerate ground-state for all s. The spec- 
tral gap A(s) between the smallest and the second smallest eigenvalues of H{s) is 
sufficiently large: A = min^ A(s) > 1 / poly{n) . 

(A3) The initial Hamiltonian is sufficiently simple so there exists a poly{n) algorithm 
that finds a basis vector \x) such that the overlap between \x) and the ground-state 
oiH„, is at least 2-p°'2^("). 

In contrast to the standard paradigm of adiabatic quantum computation or quan- 
tum annealing we do not require the adiabatic path to be a linear interpolation be- 
tween Hin and Hf (since otherwise it may be impossible to fulfill the frustration-free 
condition). The goal of the simulation is to sample x G {0, 1}" from the probability 
distribution tt{x) associated with the ground-state oi Hf, that is, tt{x) — |(x|?A)p 
(assuming that = 1). Our first result is as follows. 

Theorem 1.4. Let be the ground-state of Hf and Tr{x) — \{x\ip)\'^. Suppose 
the adiabatic evolution conditions (A0)-(A3) are met. Then for any precision (5 > 
there exists a classical probabilistic algorithm that generates a random variable x € 
{0, 1}" with a probability distribution tt{x) such that \\tt — 7r||i < d. The running time 
of the algorithm is poly{n,6^^). 

It should be mentioned that the property of being frustration-free alone cannot 
render the adiabatic evolution efficiently simulatable on a classical computer. The 
following proposition is a simple extension of [2] . 
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Proposition 1.5. Let U be a quantum circuit with n input qubits initialized 
in the state |0) and L — poly{n) two-qubit gates. Let &e the n-qubit output 

state of U . For any precision S > one can construct a family of frustration-free 
Hamiltonians H{s), < s < 1 acting on poly{n,S~^) qubits and satisfying conditions 
(Al),(A2),(A3) such that the ground-state of H{1) approximates IV'l) with precision 
S (after discarding some ancillary qubits). 

For the sake of completeness we outline the proof in Appendix B. Proposition [TT5] 
implies that simulating the adiabatic evolution with frustration-free Hamiltonians is 
as hard as simulating a universal quantum computer. On the other hand, our tech- 
nique does not permit an efhcient simulation of an adiabatic evolution with stoquastic 
Hamiltonians which are not necessarily frustration-free. In fact, adiabatic evolution 
with stoquastic Hamiltonians includes a variety of the quantum annealing algorithms, 
see [S]. It is an interesting open question whether adiabatic evolution with general 
stoquastic Hamiltonians can be simulated classically in polynomial (or at least sub- 
exponential) time. Our result raises a question: how hard is it to verify that a given 
local Hamiltonian H = J^a is SFF? Clearly, the property of being stoquastic can 
be verified efficiently since every term Ha acts on 0(1) qubits. On the other hand, 
verifying that H is frustration-free requires evaluating the smallest eigenvalue of H. 
This problem is known to be QMA-hard for general local Hamiltonians, see [3]- For 
stoquastic Hamiltonians the smallest eigenvalue problem is known to be contained in 
QMA n AM, where AM (Arthur-Merlin games) is a probabilistic analogue of NP in 
which the prover and the verified can exchange a constant number of messages, see [7]. 
One can expect that verifying whether a stoquastic Hamiltonian is frustration-free 
must be easier than evaluating the smallest eigenvalue because for a positive instance 
we have the additional information that the ground-state minimizes the expectation 
of every local term in a Hamiltonian. Let us start from stating the problem more 
formally. 

Definition 1.6. A system of [n^k)- constraints is a family of n-qubit positive 
semidefinite Hermitian operators {Ha\ , a = 1, . . . , M , such that every Ha acts non- 
trivially only on some subset of k or less qubits. A system C = {Ha} is satisfiable 
iff there exists a state \ip) such that Ha IV') = for all Ha. Such a state is called a 
satisfying assignment. We shall consider systems in which k = 0(1), M < poly{n) 
and \\Ha\\ < poly{n). 

If a system C = {Ha} is not satisfiable, any state violates at least one con- 
straint, i.e., (V'l-ffalV') > for some Ha. Let us define the unsat-value of a system C 
as the smallest eigenvalue of a Hamiltonian Hq = X^a 

unsat(C)= min (V'liJcIV'), He = J" Ha. 

V':('>/'|lW = l ^ 

By definition, a system C is satisfiable iff the corresponding Hamiltonian He is frustration- 
free. The quantum fc-SAT problem is to distinguish the case when a system of (n, fc)- 
constraints is satisfiable from the case when it has a non-negligible (i.e. polynomial 
in 1/n) unsat-value. The quantum version of the Cook-Levin theorem proved by 
Kitaev [3J and developed further in [SJ [iDj asserts that quantum fc-SAT belongs to 
QMA for any constant fc and the quantum 4-SAT is complete for the class QMAi 
(the analogue of QMA with zero completeness error). Let us now define a stoquastic 
systems of constraints and the problem stoquastic fc-SAT. 

Definition 1.7. A system of {n,k)- constraints C ~ {Ha} is called stoquastic iff 
every Ha has real non-positive off-diagonal matrix elements in the standard basis. 

Definition 1.8. An instance of stoquastic k-SAT is a tuple {n,C,e), where C 
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is a stoquastic system of [n^k]- constraints and t — n^'-''^^^ is a positive number. For 
yes-instances unsat(C) = 0. For no-instances unsat(C) > e. 

It should be emphasized that stoquastic fc-SAT is a promise problem. It can be 
represented by a pair of languages (Lyes, Lno) such that 

Lyes = {(",C,e) : unsat(C) 0}, Lno = {(",C,e) : unsat(C) > e}. 

Note that classical fc-SAT can be obtained as a special case of stoquastic fc-SAT when 
all the constraints Ha are diagonal in the standard basis with matrix elements 0, 1 on 
the diagonal. It follows that stoquastic fc-SAT is NP-hard for fc > 3. Our second result 
is that stoquastic fc-SAT can be placed in the complexity class MA — a probabilistic 
analogue of NP with only one message sent from the prover to the verifier. For 
the sake of completeness we present a formal definition of MA and Promise-MA in 
Appendix A. In addition, we proved in [J that stoquastic fc-SAT is complete for the 
class Promise-MA for sufficiently large fc. Putting these results together gives 

Theorem 1.9. The promise problem stoquastic k-SAT is contained in MA for 
any constant fc. Any promise problem in MA is Karp-reducible to stoquastic 6-SAT 
with constraints {Ha = I — IIq} where Ha are projectors with matrix elements from a 
set {0, i,l}. 

This result can be regarded as a generalization of the Cook- Levin theorem proving 
NP-completeness of the classical satisfiability problem. 

The rest of the paper is organized as follows. In Section [TT21 we briefly review the 
previous work on the subject. Section [2] sketches the main ideas and techniques used 
in the proof of Theorem 11.41 and Theorem 11.91 Section [3] provides some interesting 
examples of SFF Hamiltonians. Basic properties of non-negative matrices required 
for understanding of our simulation algorithms are presented in Section (4] A proof 
of Theorem 11.41 can be found in Section [5l Theorem 11.91 is proved in Section [B] In 
Section [7] we discuss some open problems and directions for future work. A formal 
definition of the classes MA and Promise-MA is given in Appendix A. Finally, Ap- 
pendix B contains a proof of Proposition ! 1 . 51 and a proof of MA-hardness of stoquastic 
6-SAT. 

1.2. Previous work. Stoquastic Hamiltonians are well known in computational 
physics as Hamiltonians avoiding the "sign problem" . It was realized decades ago that 
ground-state properties of such Hamiltonians can be simulated using classical Monte 
Carlo algorithms, see pTl 112]. for systems as large as several hundred qubits. The 
general limitations of such algorithms which are likely to make them inefficient in 
the complexity-theoretic sense were also well understood, see e.g. |T21[I3]. The first 
rigorous attempt to analyze the complexity of the smallest eigenvalue problem for 
stoquastic Hamiltonians was made in [7|. It was shown that this problem belongs to 
the complexity class AM (Arthur-Merlin games). Using the same ideas the smallest 
eigenvalue problem was shown in the unpublished |14j to be contained in a smaller 
class SBP C AM, where SBP stands for Small Bounded- Error Probability, see [15]. 
The complexity of the smallest eigenvalue problem for fc-local stoquastic Hamiltonians 
was shown to be the same for all fc > 2, see [T. A related problem called "Stoquas- 
tic Local Consistency" which involves verifying certain consistency conditions for a 
collection of local density matrices was studied by Liu [16] . 

A connection between stoquastic Hamiltonians and classical probabilistic compu- 
tation was studied by Aharonov and Ta-Shma in J/7j. Using the technique of adiabatic 
state generation these authors constructed quantum algorithms for q-sampling from 
the stationary distribution of a reversible Markov chain satisfying certain additional 
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properties. An analogous connection between stoquastic Hamiltonians and classical 
statistical mechanics was obtained by Verstraete et al. [TS] and Somma et al. [TOj . 
These authors proved that a coherent version of the Gibbs thermal state associated 
with any local classical Haniiltonian can be represented as the unique ground-state of 
stoquastic frustration-free Hamiltonian. 

2. Techniques. This section highlights the main ideas and techniques used in 
the rigorous proofs in Sections [5] and [S] 

2.1. A random walk associated with a SFF Hamiltonian. The main tech- 
nical tool used throughout the paper is a novel random walk algorithm that allows 
one to simulate some ground-state properties of SFF Hamiltonians. This algorithm 
is similar in spirit to the Green Function Monte Carlo method (GFMC) — a proba- 
bilistic heuristic for the simulation of quantum spin systems, see |lHll2j. However, in 
contrast to GFMC our algorithm offers rigorous upper bounds on the running time 
and the error probability. 

Let H = Ha be some SFF Hamiltonian and \'4)) be a ground-state of H , i.e, 
Ha = for all a. Using the Perron-Frobenius theorem we will show in Section |4] 
that a ground-state of any SFF Hamiltonian can be chosen as a vector with real non- 
negative amplitudes in the standard basis (if the smallest eigenvalue has multiplicity 
g, one can choose q orthonormal ground-states such that each state has non-negative 
amplitudes). For that reason we can assume that {x\il}) > for all a: G E". A set of 
binary strings that appear in j'i/') with a non-zero amplitude will be called a support 
of I?/)) and denoted as 

(2.1) S{iP) = {2; e E" : {x\iIj) > 0}. 

A random walk associated with a Hamiltonian H and a ground-state {tp) is a 
random walk on the set S{ip) with transition matrix 

(2.2) P =^{y\G\x), G = I-PH, foranyxe5(V'). 

{Am 

Here > is a real parameter that is chosen sufficiently small in order to make G 
a matrix with non-negative entries, so that Px^y > 0. One can infer directly from 
the definition that Px^y = unless y € S{ili). Besides, the eigenvalue equation 
G \^) = 1-0) implies ^y^s(-ii>) P^^y — 1 ^ ^ S{iJ}). Therefore Eq. (|2.2p indeed 

defines a random walk on the set S{il>). Direct inspection shows that the stationary 
distribution of the random walk is 

(2.3) ^{x) = (xlV)^ 

Here we assumed that is a normalized state, i.e., (V'lV') = 1- Note that for a 
given Hamiltonian H one may have several stationary distributions supported on 
mutually disjoint sets of basis vectors such that each distribution is associated with 
some non-negative ground-state of H . 

Let us now argue that the random walk defined in Eq. (|2.2[) can be efhciently 
simulated on a classical probabilistic computer. Indeed, let H^ be the spectral pro- 
jector corresponding to the zero eigenvalue of Ha- By definition, H^ \^) = j-f/;) for 
all a. The crucial property of the projectors Ha is that they have real non-negative 
matrix elements in the standard basis. This property can be proved using elementary 
algebra, see Sectional Moreover, we will show that any projector with non- negative 
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entries can be decomposed into a direct sum of rank-one projectors with non-negative 
entries. Using this decomposition we shall be able to show that if a; G S{ijj) and 
{y\Ha\x) < for some a and some y G S" then y e and 



Note that Px^y = unless {y\G\x) > 0, that is, (y\Ha\x) < for some a. Since every 
Ha acts non-trivially on 0(1) qubits, the number of strings y such that Px-ty > 
is at most poly{n). Therefore, given a current position of the walk x € S{ip) one 
can efficiently simulate one step of the walk by first finding all strings y such that 
{y\Ha\x) < for some a and then using Eq. (|2.4p and Eq. (|2.2[) to compute the 
transition probabilities. 

2.2. Simulation of the adiabatic evolution. When we discretize the adia- 
batic evolution wc get a family of SEE Hamiltonians H^^^ = Ha{j/T), where 

j = 0, . . . , T is a discrete time step. The Hamiltonian i?^^^ has a unique non-negative 
ground-state \ip'-^^) with support S{ip'^^^)- Using definition Eq. (12. 2p gives us a family 
of efficiently simulatable random walks P^-^\ P'^^\ . . . , p(^) such that P'^-' is a ran- 
dom walk on the set S{ip^J''). The walk P^-'^ has a stationary distribution n^^^ such 
that Tri"''' = {x\^^J'>)'^. Note that the spectrum of P*^-'^ coincides with the spectrum 
of G^^^ — I — PH'^^^ restricted to a subspace spanned by basis vectors from S{tp^^^). 
Since the largest eigenvector of G'^^^ belongs to this subspace, the spectral gap of P*^-'^ 
(i.e. the gap between the largest and the second largest eigenvalues) is at least the 
spectral gap of G*-^-* . Condition (A2) implies that the spectral gap of G*^-'^ is at least 
(3 A. Therefore the spectral gap of P*^-'^ is at least (3 A which is polynomial in 1/n. 

Recall that the goal of the simulation is to sample x from the final distribution 
TT^K Since the spectral gap of the walk p(^) is polynomial in 1/n, all we need is a 
warm start for P'^'^\ that is a string x G S'(i/'^"^-') such that the stationary distribution 
TT*^^^ has a non-negligible probability at x. Here non-negligible means ir^^ > 2~p°'i'("). 
Our strategy is to generate a warm start for the walk P^-^+i) using a warm start for 
P^^-' by making sufficiently many steps of the walk P^^'' such that the endpoint of P^^^ 
is a string sampled from the stationary distribution tt*^-'^ (with an exponentially small 
error). As far as the initial walk P'-*'-' is concerned, a warm start can be efficiently 
generated due to condition (A3). The main technical challenge is to bound the prob- 
ability of failure, i.e., the probability that for some j the end-point of the walk P^-') 
is not a warm start for the next walk p(J+i) . 

In order to achieve this we introduce the notion of t-balanced strings. Namely, 
given probability distributions tt and p on the set E", a string x G S" is i-balanced 
with respect to tt and p iff tTx,Px > and t^^ < tTx/px ^ t. We show that for 
sufhciently large (but constant) t the probability for a string x drawn from tt to be 
i-balanced is at least 1 — 0(1 — F{tt,p)), where F{n,p) = J2x y/^xPx is the fidelity 
between tt and p. Using conditions (Al) and (A2) we shall bound the fidelity between 
tt'-^^ and 7r'^-'+^^ as 



(2.4) 



{y\^a\y) 

{x\Ua\x)- 



(2.5) 



P(7r(^'\7r(j'+i') > 1 



T^A^' 



It follows that a string drawn from 7r(j) is t-balanced (for some t = 0(1)) with respect 
to 7r(-?) and tt^^+^^ with probability at least 1 - 0[J'^T-'^ A^'^). Choosing T > J^A-^ 
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and choosing the number of steps in each walk much larger than the inverse spectral 
gap we shall prove that the end-point of the walk P^^' is a warm start for the walk 
P(^+1) for aU j = 0, . . . , T - 1 with probability at least 1 - 0( J^T-^A-^) w 1. 

2.3. Stoquastic fc-SAT is contained in MA. Let (n,C,e) be an instance of 
the stoquastic /c-SAT problem. Here C = {Ha}a=i,...,M is a system of stoquastic 
constraints. Define a Hamiltonian H = X^ali ^a- By definition, 

(rt,C,e) is yes-instance iJ is a SFF Hamiltonian, 

{n,C, e) is no- instance ^ The smallest eigenvalue of H is at least e. 

Let Hq be the spectral projector corresponding to the zero eigenvalue of Ha- We shall 
partition the set of all binary strings E" into good and bad strings, such that 

(2.6) Sgood = {x e E" : {x\Ua\x) > for all a = 1, ... , M} 

and Sbad — E"\5good- For any instance (n, C, e) and any x £ Sgood define the transition 
probabilities 




(2.7) P.^, = — TT {y\Ga\x), Ga = I-PHo, 



where /? > is a real parameter chosen sufficiently small so that all matrices Ga 
are non-negative. One can infer directly from the definition that Px—>y — unless 
(j/|Ha|?/) > for some a. Therefore, for any given x the number of strings y such 
that Px~>y > is at most poly{n). The property that Hq is a direct sum of rank- 
one projectors with non-negative entries implies that the transition probabilities are 
normalized, that is, '^y^-^n Px^y = 1 for any x e Sgood, see Section 3] for details. 
However, the transition probabilities Eq. (|2.7p do not automatically define a random 
walk on the set of good strings because one may have transitions from a good string 
to a bad string. In other words, Eq. (|2.7p permits transitions Sgood Sgood as well 

as Sgood *■ Siiad- 

It turns out that if (ri,C,e) is a positive instance then Eq. (|2.7p does define a 
random walk on some subset of good strings. Indeed, let {ip) be a satisfying as- 
signment, i.e., a state satisfying Ha — for all a. As was mentioned above, we 
can assume that |^) has real non-negative amplitudes. Using the eigenvalue equa- 
tions Hq 1?/;) = 1^) one can easily show that is supported only on good strings, 
S{ip) C Sgood, and for any x € S{tp) the transition probabilities Eq. ()2.7p can be 
expressed as 

(2.8) Px^y = ^iy\G\x), G=^f:G.. 



Repeating the same arguments as in Section 12.21 we conclude that Eq. (|2.8p is a 
transition matrix of a random walk on the set S{'ip). For any given starting string 
X G S{tlj) the walk stays in S{ip) forever. The walk can be efficiently simulated on 
a classical probabilistic computer. (In contrast to Section [2.21 the mixing time of the 
walk is not a matter of concern.) 

Suppose now that (n, C,e) is a negative instance. One can still use Eq. ()2.7p to 
simulate a random walk starting from a good string until the first time the walk hits 
a bad string. It will be shown in Section [S] that the probability for the walk starting 



8 



S. BRAVYI AND B. TERHAL 



from a good string to stay in Sgood for L steps (and satisfy some extra tests which are 
always passed for positive instances) decays approximately as (1 — fie/M)^ . Given 
the polynomial bounds on (3, e, and M we can make this probability exponentially 
small with L = poly{n). 

In order to prove that (n,C,e) is a positive instance, the prover can send the 
verifier a binary string w G S" such that some satisfying assignment {ip) has a non- 
negligible amplitude on w (for a negative instance w can be arbitrary string). The 
verifier checks whether w e Sgood and simulates L = poly{n) steps of the random 
walk defined above starting from w. Whenever the walk hits a bad string, the verifier 
aborts the simulation and outputs 'no'. If the walk stays in Sgood for L steps, the 
verifier outputs 'yes' (conditioned on the outcome of some extra tests described in 
Section ^ . 

2.4. MA- hardness. MA-hardness of the stoquastic 6-SAT problem with the 
constraints satisfying conditions of Theorem 11.91 follows directly from from MA- 
hardness of the stoquastic 6- local Hamiltonian problem, see Lemma 3 in [7]. In 
order to make the paper self-contained we repeat the proof of [71 with some minor 
modifications in Appendix B. 

3. Examples of stoquastic frustration-free Hamiltonians. In this section 
we give some examples of SFF Hamiltonians. Firstly, the results obtained by Ver- 
straete et al. [TS] and Somma et al. ][19j imply that a coherent version of the thermal 
Gibbs state associated with any classical local Hamiltonian can be represented as the 
unique ground-state of a SFF Hamiltonian. Secondly, we use the clock Hamiltonian 
construction from [3J to show that a coherent version of a probability distribution 
generated by any polynomial-size classical reversible circuit can be approximated by 
the ground-state of a SFF Hamiltonian. 

3.1. Coherent thermal states of classical Hamiltonians. Let H be any 

classical Hamiltonian acting on n qubits {H has a diagonal matrix in the standard 
basis). Denote H{x) — {x\H\x). Choose any (3 > and consider a coherent version 
of the thermal Gibbs state 



Given a state |7r) one can sample x from the Gibbs distribution — Z^^e^^^'^' by 
measuring the state in the standard basis. More interestingly, given coherent Gibbs 
states \tt) and {tt') corresponding to some classical Hamiltonians H and H' , one can 
perform the swap test on the two states thus evaluating the statistical difference 
between the two Gibbs distributions, see [T7] . 

Suppose that _ff is a local Hamiltonian, H — Ha, and each qubit is acted on 
by a constant number of terms Ha- The analysis performed in [T51[Tp] shows that the 
state Eq. (|3.ip is the unique ground-state of some SFF Hamiltonian Hp. Indeed, one 
can represent [tt) as follows (ignoring the normalization) 



(3.1) 





e 




1+) = E 1^)- 
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for all j — 1, . . . ,n. Note that the operator Tj is diagonal in the standard basis. Since 
aU matrix elements of Tj are real, we conclude that Tj is Hermitian. Since we assumed 
that any qubit is acted on by a constant number of local terms in H , we conclude 
that Tj acts non-trivially on a constant number of qubits. Define a Hamiltonian 

n 

such that Hp |7r) = 0. The Perron-Frobenius theorem implies that \-n) is the unique 
ground-state of Hp (indeed, G ~ I — jH is a non-negative irreducible matrix for 
sufficiently small 7 > and \tjj) is a positive eigenvector of G). The same argument 
shows that |7r) is a ground-state of every local term Tj — Xj. It follows that Tj — Xj 
is a positive semi-definite operator and thus Hp is a SFF Hamiltonian with unique 
ground-state |7r). 

3.2. Coherent probabilistic computation. Let C/ be a classical polynomial- 
size circuit with reversible gates (e.g. Toffoli gates) with n input and n output bits. 
Assume that the first k input bits are drawn from the uniform distribution and the 
last n — k input bits are initialized to 0. Let tt be the corresponding probability 
distribution of the output bits. Consider a coherent version of tt, 

(3.2) 1^) = J2 

We claim that |7r) can be represented as the unique ground-state of some SFF Hamil- 
tonian. More strictly, for any precision 6 > there exists a SFF Hamiltonian H 
acting on poly{n, S~^) qubits such that H has an unique ground-state {ip) satisfying 
{ipliT (g) (pa) > 1 — 6 for some simple ancillary state {(pa)- Such a Hamiltonian H can 
be constructed by transforming U into a quantum circuit U taking as input a state 
|_^N|®/c|Q^®(«-fc)^ where \+) = (|0) + \l))/V2. The circuit JJ first applies the gates of 
[/ in a coherent fashion and then applies S~^L identity gates, where L is the number 
of gates in U. Note that the output state of U is [tt). Applying the clock Hamilto- 
nian construction of [3] to t/ we get the desired Hamiltonian H. The details of this 
constructions are presented in Appendix B. 

4. Non-negative matrices: basic properties. This section summarizes some 
basis properties of non-negative matrices that are needed in understanding our sim- 
ulation algorithms. Let us start from setting up some terminology and notations. 
A matrix is called non-negative iff all its entries are real and non-negative. A term 
non-negative projector will refer to a Hermitian projector acting on Q" which has a 
non-negative matrix in the standard basis. Analogously, a term non-negative state 
will refer to a normalized vector \ip) e Q" such that all amplitudes of \^p) in the 
standard basis are real and non-negative. Let us start from a simple observation. 

Proposition 4.1. Let H be a Hermitian operator with non-positive off-diagonal 
matrix elements in the standard basis. Then the spectral projector H corresponding to 
the smallest eigenvalue of H is non-negative. 

Proof Indeed, U = q- hm^^oo e^'^"/Z{P), where Z(/3) = Tr(e"'^^) and q is the 
multiplicity of the smallest eigenvalue. Since e^^^ is a non-negative matrix for any 
/3 > 0, the limit H is a non- negative matrix. □ 

Next we shall give a simple characterization of non-negative projectors. 

Lemma 4.2. For any non-negative projector H of rank q there exist non-negative 
states iV'i), . • . , \ipq) such that (V'alV'b) = <^a,fc for all a,b and H = IV''a)(^a|- 
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Note that non-negative states are pairwise orthogonal iff they have support on 
non-overlapping subsets of basis vectors, that is, S{'ipa) H ^(V'b) = for a 7^ &. Thus 
the lemma asserts that a non-negative projector is always block-diagonal (up to a 
permutation of basis vectors) with each block being a projector onto a non-negative 
state. Combining Lemma IT2l and Proposition 14. II one concludes that 

Corollary 4.3. The ground- sub space of any stoquastic Hamiltonian has an 
orthonormal basis of non-negative ground- states. 

Let us proceed with the proof of Lemma 14.21 

Proof. For any basis vector |a;) define a "connected component" 

- {y e S" : {x\Il\y) > 0}. 

(Some of the sets may be empty.) For any triple x, y, z the inequalities (x|n|j/) > 0, 
(y|n|2;) > imply (a;|n|2;) > since 

(x|n|z) = (a;|n2|z) = (a;|n|u)(u|n|z) > (a;|n|?/)(?/|n|z) > 0. 

A similar argument shows that if Tx is non-empty then (a;|n|x) > 0, that is, x € Tx. 
Therefore the property (a;|n|?/) > defines a symmetric transitive relation on E" and 
we have 

• y GTx imphes Ty = Tx, 

• y iTx imphes Tyr\Tx = 0. 

Consider a subspace H{Tx) C Q" spanned by the basis vectors from Tx. Clearly 
Ti.(Tx) is H-invariant. Thus H is block diagonal w.r.t. decomposition of the whole 
Hilbert space into the direct sum of spaces T-L{Tx) and the orthogonal complement 
where H is zero. Moreover, the restriction of H onto any non-zero subspace TL{Tx) is 
a projector with strictly positive entries. According to the Perron-Frobenius theorem, 
the largest eigenvalue of a Hermitian operator with positive entries is non-degenerate. 
Thus each block of H has rank 1, since a projector has eigenvalues and 1 only. □ 

We shall use this characterization of non-negative projectors to derive the follow- 
ing lemma that plays a key role in the definition of a random walk in Section [S] 

Lemma 4.4. Let 11 6e a non-negative projector. Suppose nli/)) = for some 
non-negative state \^) . Then for any x G S{'>jj) one has 

(1) {x\n\x) > 0, 

(2) If {x\Il\y) > for some y G S" then y e S{ip) and 

/ fainiy) 

{x\^) ^ {x\U\x)- 

Proof. Statement (1) can be proved by contradiction. Assume x G S{tp) and 
(a;|n|x) = 0. Then Il\x) = and thus {x\-tp) = {x\Il\ip) = which contradicts the 
definition of S{tp). To prove the first part of statement (2) note that (x|n|y) > 
implies 



{yl^lj) = (ylnlV-) > {y\U\x){x\^) > 0, 
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that is, y £ S{iIj). The identity Eq. (|4.ip foUows from Lemma Indeed, consider a 
decomposition of 11 into non-negative pairwise orthogonal rank-one projectors: 

n^^lV'aXV'al, g = rank(n). 

a=l 

The condition (a;|n|?/) > imphes that x and y belong to the same rank-one block of 
n, that is 

n la;) = ii^alx) IVa) = ^WW) IV'a), 

IL\y)^{i;a\y)m = ^/W\y)m 
for some block a. Now we have 

{x\i;) = {x\n\,p) = V{x\n\x) (V-al^), 
(2/IV) = (y|n|^) - V(y|n|?/) (V'alV)- 

Computing the ratio {y\ij}) / {x\tp) we get Eq. (|4.ip . □ 
Now we are ready to prove Eq. (|2.4p . 

Lemma 4.5. Lef = Y.aLi Ha he some SFF Hamiltonian and Ha be the spectral 
projector corresponding to the zero eigenvalue of Ha- Suppose H lip) — for some 
non-negative state \ip). If for some x € S{ip), y € S", and a G {1, . . . , M} one has 
{y\Ha\x) < then y G S{ip) and 

{x\^) ^ {x\Ua\x)' 

Proof. Without loss of generality x ^ y. Let us show that {y\Ha\x) < implies 
(j/lllala;) > 0. Indeed, let ^ > be the second smallest eigenvalue of Ha- Then 
< 5{I — Ha) < Ha- Define a Hermitian operator O = \y){x\ + \x){y\- It follows that 
-<5Tr(Onj = STt{0{I - H^)) < Tr(Oi?J = 2{x\Ha\y)- Since we already know that 
Ha has real matrix elements, see Proposition 14. 1[ we get (5(a;|na|y) > —{x\Ha\y) > 
and thus (zjllal?/) > 0. Now the lemma follows from Lemma WM □ 

5. Simulation of the adiabatic evolution. In this section we prove Theo- 
rem ll.4l Let us start with discretizing the adiabatic evolution. Define H^^^f = H{j/T), 
j = 0, - - - ,T where T is a large integer that will be chosen later. Using the bound 
\\dH{s)/d{s)\\ < J we get 

(5.1) ||ffO-+i)_ffO-)||<Z. 

The next step is to bound the overlap (inner product) between the instantaneous 
ground-states at time j and j + 1. Let I'lp^-'^) be the ground-state of ij'^', that is, 
ffU) |-)/)0)) — 0. We can assume that \^^j'>) are non-negative states, see Corollary 14. 31 
Lemma 5.1. Let A be the smallest spectral gap of H^^\ j = 0, . . . ,T. Then for 
any j one has 



(5.2) 
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A more general version of this lemma was proved in jl7| . For the sake of completeness 
we prove the lemma below. 

Proof. Consider a decomposition = a\ip^^^) +6|V-''l''): where I'lp'f') is a 

normalized vector orthogonal to \ip^-'''), so that |ap + \b\^ = 1. Then 

II i7(j')|i^(^+i)) II = |6| • II li^'^i^) II > |6|A. 

On the other hand, 

II H^J^\iP^^+^^) II = II - h(J+i))|7/>(^'+i)) II < ||i?(^') - h(J'+i)||. 
Taking into account the bound Eq. (|5.ip we arrive at |6| < JA^^T^^. Therefore 

□ 

For every j = 0, . . . , T define an operator 

M 



/ - PH'-^\ where /3~^ = ^max^ ^ \\Hais)\\ 



By definition of a local Hamiltonian ||iJa(s)|| < poly{n), M < poly{n) and thus 
(3 > poly{l/n). The following properties of G'^-'^ follow directly from the definition. 

Proposition 5.2. The operator G^^^ has a non-negative matrix in the standard 
basis. The spectrum of G^^^ belongs to the interval [0, 1] and IV'^''-') is the only eigen- 
vector of G'^^^ with eigenvalue 1. The eigenvalue 1 is separated from the rest of the 
spectrum by a gap which is at least /?A. 

For any x,y £ S{ip''^'>) define the transition probability 

As was explained in Section [^T^ P^-'^ defines a random walk on the set S'(?/''-''') with 
the stationary distribution 

7r« = (x|i/;(^'))2. 

Since P^-'^ is obtained from G^^^ by a similarity transformation, the spectrum of the 
matrix P^-'^ coincides with the spectrum of G*-^-* restricted to the subspace spanned 
by basis vectors from S{ip^^^). Since the largest eigenvector of G^^-' belongs to this 
subspace, we conclude that P^^^ has a spectral gap at least /3A. Lemma [5.11 allows 
one to bound the fidelity between the stationary distributions tt^-^^ and i:'^^^-^^ , 

J2 



(5.4) P(7rW,7r(^+i)) = ^ = {^^^^\^^'+'^) > 1 - 

In order to simulate the adiabatic evolution we shall generate a sequence of strings 
2.(0) ^ ^.(i) ^ . . . ^ £ E" such that a;*^°) is an arbitrary string satisfying \^p^^^) > 

2~", and x'-^^^'> is generated from a;'^' by making L steps of the random walk P^-') 
starting from x'^' . We shall try to choose the number of steps L such that for all j the 
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distribution n^^^ has a non-negligible probability at x^^\ More specifically, we want 
the following inequality to be satisfied with high probability for all j = 0, 1, . . . , T: 

(5.5) (x(^')lV''^'^) > 2-"-2. 

A string a;^^' satisfying Eq. (|5.5p will be referred to as a warm start (for the random 
walk P^-')). Let Tri"''' be the probability distribution of a string x obtained by making 
L steps of P^^-* with a fixed warm start x'^^K Using the definition of the random walk 
one can express the statistical difference between the distributions tt^^^ and tt^-'^ 

as 

where = G^^^ — \^^^^) {ip'^^^ \ . Applying the Cauchy- Schwartz inequality and taking 
into account that the largest eigenvalue of is at most 1 — /3A, we arrive at 

Clearly the statistical difference can be made exponentially small with L — poly{n). 
Neglecting exponentially small errors, we shall assume for simplicity that tt^^^ = tt'^^ , 
that is, given the warm start condition at step j, the endpoint a;*^^+^^ of the walk P^^^ 
is drawn from the stationary distribution Tr^^\ All that remains is to evaluate the 
probability for the warm start condition to be violated. In order to achieve this, let 
us introduce the notion of i-balanced strings. 

Definition 5.3. Let tt, p he probability distributions on E" and t > 1 be a real 
number. A string x € S" is called t-balanced with respect to tt and p iff > 0, Px > 
and t~^ < TTx/px < t. We shall denote a set of all t-balanced strings as Mt{TT,p), 
that is 

(5.6) Mt(7r,p) = {a;eS" : vr, >0, > 0, < — < i}- 

Px 

Let P(7r, p) — X^xeS" ^/'^xPx be the fidelity between tt and p. 

Lemma 5.4. Suppose P(7r, p) > I — S and t > A. Then the probability for a string 
X drawn from the distribution tt to be t-balanced is 

(5.7) V ^.>1 



^ l-2t-i/2- 



Proof. Indeed, if x is not t-balanced then 

\Ji^xPx < t^^^^raa^{Trx,Px} < t^^^^i^^x + Px)- 

Thus 

l-S< y/^ixP^+t-^/"^ (tTx+Px)- 

xeMt{n,p) x^Mt{TT,p) 

Taking into account that ^t^xPx < (l/2)(7i'rE + Px) we get 

XeMt{TT,p) x(Mt{TT,p) X^Mt{T!,p) 
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It follows that 

<5 > (1/2 - ^ (tt.+p,) 



which yields Eq. (|5.7p . 
□ 

Using Lemma [5. II we can bound the probability for a;^-''^^'' to be t-balanced with 
respect to tt^-') and 7r(-'+^^ for < = 16 as 



(5.8) Vr\x^'+^^ e A/i6(7r(^\7r(^'+i)) 



> 1 - 



4J 



2 



A2r2' 



Thus in order to prove that a;'^-'+^' is a warm start for p(J+i) it suffices to show that 
tt'^-') has large enough probability at a;^-'"*"^^. Recall that a;'--'^^' is random string drawn 
from the stationary distribution tt^^' (with exponentially small error). 

Proposition 5.5. Let -k be a probability distribution on S". The probability for 
a string x drawn from tt to satisfy tTx > 2^^" least 1 — 2~", 

Proof. Indeed, 

J2 T'x< 2"2-2» = 2-". 



Again ignoring, for simplicity, events that occur with exponentially small proba- 
bihty, we assume that tt^^+i) — 2~^" and thus Eq. (|5.8p imphes 



(5.9) Pr[(a;(^+iV(^+i)) > 2-"- 



> 1 - 



4J2 

A2T2' 



Thus the conditional probability for x'^^^^^ to be a warm start provided that a;^-'-' is 
a warm start is at least 1 — 4j2A~2y-2^ Therefore the probability for x*^-'-' to be a 
warm start for all j = 1, 2, . . . , T is at least (1 - 4 J^A'^T^^)?- ^ ^ _ 4j2A-2r-i 
for T ^ IS.^^J^. If the warm start condition has been violated at some step, we 
can not guarantee that is drawn from the distribution tt'-^^ (in fact, the final 

distribution might not be defined in this case because the endpoint of some walk P(^) 
may be outside of S'(i/'^^'+^^)). Therefore, our simulation scheme fails with probability 
at most S - J2A-2T-1. it follows that T polv{n, 5-^). 

6. Stoquastic fc-SAT is contained in MA. Recall that we consider an in- 
stance of stoquastic fc-SAT (n,C,e), where e = n~^^^^ is a precision parameter and 
C = {Ha}a=i M is a stoquastic system of (n, fc)-constraints. 

A formal description of the prover's strategy is the following. Consider first a 
yes-instance. Let £ Q" be any satisfying assignment (which can always be chosen 
as a non-negative vector) . The prover sends the verifier a string w G S" corresponding 
to the largest amplitude of j?/;), that is, {w\il)) > {x\4') for all x e E". In case of a 
no-instance the prover may send the verifier an arbitrary string w G E". 

The verifier starts by choosing /3 > such that /3||iJa|| < 1 for all a and an integer 
L such that 

(6.1) 2* (1 -e/3M-i)^ < i. 

3 

Note that this inequality can be satisfied with L ~ poly{n). Then the verifier performs 
a random walk with L steps as prescribed below. 
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Step 1: Receive a string w € S" from the prover. Set xq — w. 

Step 2: Suppose the current state of the walk is xj. Verify that xj £ Sgood, 
see Eq. (|2.6|) . Otherwise, output 'no'. 

Step 3: If j = L goto Step 8. 

Step 4: Generate a random miiform a G {1, . . . , to}. 
Step 5: Find the set JVJxj) = {y e : {xj\na\y) > 0}. 
Step 6: Generate a random Xj+i G J\fa{xj) from the distribution 



Step 7: Compute and store the number 



pa 

(6.3) Tj+i = ^^-^^^"+1 



(Xj + ilGalXj) 



step 8: Verify that Y[f=i — 1- Otherwise output 'no'. 



Set j ^ j + I and goto Step 2. 
Verify that J] 

Step 9: Output 'yes'. 



6.1. Completeness of the protocol. In this subsection we prove that for yes- 
instances the verifier outputs 'yes' with probability 1. Let |'(/') be a satisfying assign- 
ment chosen by the prover. We can assume that is a non-negative vector, see 
Corollary 14.31 Lemma implies that for any choice of a at Step 4 one has 

pa _ i^J + lW , ,^ 

and thus the overall probability of a transition from xj to xj^i at Steps 4,5,6 is 

M 



(6.4) 



Px,^x, + i - ^i^iif^ {Xj + l\G\Xj), G - — ^Ga 



It follows from Lemma l475l that the walk never leaves the set S'(i/'). Using the above 
expression for P^^^xj+i ^"^^ 

Therefore, 

L 



TT 
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Taking into account that w is a sting with the largest amplitude one can see that 
Y[f=i — 1 fo'' possible xl € S{iIj) and thus the test at Step 8 will always be 
passed. Thus the verifier outputs 'yes' with probability 1. 

Let us remark that the completeness of the protocol is not affected by the precision 
up to which the verifier approximates the probability distribution P^j^xj+i Step 6 
as long as Xj+i € Afa{xj) with probability 1 and the coefficients rj are computed using 
exact formulas Eqs. (|6.2l6.3p . The precision will be important for the soundness of 
the protocol, see the next section. 

6.2. Soundness of the protocol. In this subsection we shall prove that for 
no-instances the verifier outputs 'yes' with probability at most 1/3. Without loss of 
generality the witness w = Xq is a good string (otherwise the verifier outputs 'no' at 
the very first step of the walk). The probability for the walk starting from a;o G Sgood 
to stay in Sgood at every step j = 1, 2, . . . , L is 

PgoodiL) — -—^ ^ ^ Pxl~*xi Pxl^X2 ' ' ' PxL-i^XL- 

ai,...,a£, = l,...,J\/ xi,...,XL&Sgood 

Taking into account Eq. (|6.3p one gets 

Pgood{L) = ^ ^ \\\rj\{xQ\GaAxi){xi\Ga2\x2)---{xL-l\GaAxL)- 

Xi,...,XLGSgood / 

a 1 , . . . , a i — 1 , . . . , M 

Here the coefficients rj are functions of the "trajectory" xq^ . . . ,xl and ai, . . . , of 
the walk. At this point we invoke the test at Step 8. The verifier outputs 'yes' iff the 
walk stays in Sgood at every step j = 1, . . . , L and 11^=1 ''j — 1- Thus the probability 
Pyesixo) for the verifier to output 'yes' for a fixed starting string xq = w E Sgood can 
be bounded from above as 

Pyes{xQ)<^Y^ ^ {xQ\GaAxi) {xi\Ga2\x2) ■■■{xL^l\GaAxL)■ 

Xl,...,XL &Sgood 

ai,...,ai — 1,...,A/ 

Using the operator G = M'^ YILi Ga = I - PM'^H we have 

Pyes{xo) < ^ {xo\G\xi) {xi\G\x2) ■ ■ ■ {xl^i\G\xl). 

Xi,...,XLeSgaod 

Taking into account that all matrix elements of G are non-negative, we get 

Pyesixo) < 2t(a;o|G^|+), 

where |+) = ^-'^/'^Y.xeJ:^ I 

x) is the uniform superposition of all 2" basis vectors. 
Let A be the largest eigenvalue of G. The promise for a no-instance implies that 
A < 1 - el3M-^ and thus 

(xo|G^|+) < A^ < (1 - ef3M-Y- 

Therefore 

Pyes{xo)<2^il~e(3M-Y < i 
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for any starting string xq. It proves that the verifier outputs 'y^s' with probabihty at 
most 1/3. Now suppose that Step 6 is implemented with some finite precision using 
a probabihty distribution Px--^y such that 

(6.5) V \Pl^,-Pl 



< S for any xj G Sgood, for any a — 1, 
One can easily verify that Eq. (|6.5p implies 



E 



poi pa2 paL pai pa2 pai. 



< L5. 



Thus using an approximate probability distribution at Step 6 leads to corrections of 
order LS to the overall acceptance probability. Choosing S ^ we can get an 
acceptance probability smaller than 1/2 which can be amplified to 1/3 using standard 
majority voting. 

6.3. Simplified stoquastic fc-SAT. Let C — {Ha — I—^a}a=i,...M be a system 
of (n, A;)-constraints where each IIq is a projector with matrix elements 0, 1/2, 1. Recall 
that verifying satisfiability of C is a problem complete for Promise-MA if A; > 6, 
see Theorem 11.91 It is of interest to consider in more detail how the random walk 
algorithm described above works for this simplified version of stoquastic /c-SAT. 

The identity IIq = 11^ implies that Ha is a block-diagonal matrix (up to a permu- 
tation of basis vectors) such that every one-dimensional block is either or 1, every 
two-dimensional block is a matrix 

1/1 1 
2^11 

and there are no blocks with dimension higher than two. Let us define a graph 
G — {V, E) such that vertices of G are n-bit strings and a pair of strings (x, y) is 
connected by an edge iff there is at least one projector Ha such that (xIIIqI?/) — 1/2. 
Note that G has degree at most M, the number of projectors Hq. The vertices of G 
can be partitioned into good and bad vertices, see Eq. (|2.6p . In other words, 



= {x e S" : {x\Iia\x) e {I, i} for all a}, 

and Sbad = {a; € : (xlllala:) = for some a}. 

The random walk described by Steps 4, 5 and 6 of the verifier's protocol can now 
be simplified as follows (we shall assume that /? = 1 so that Ga = Hq). Suppose at 
some step j the walk was at some good vertex Xj. Then at the next step the walker 
moves to one of the nearest neighbors of Xj with probability 1/(2M) and stays at 
the vertex Xj with probability 1 — deg(a;j)/2Af , where deg{xj) is the number of edges 
incident to xj. 

One can easily observe that the system C is satisfiable, unsat(C) ~ 0, iff the graph 
G has a connected component G" = {V',E') that contains only good vertices, V C 
Sgood- Given such a connected component, a state \Tp) = J2u£V' I"") ^ satisfying 
assignment, that is. Ha \ip) — \tp) for all a. Hence for a 'yes'-instance the prover can 
simply give any string in V' . Note also that the test at Step 8 of the protocol is not 
needed now since rj — 1 for any realization of the walk. 
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The promise on the unsat-value for 'no'-instances can be translated into a promise 
that for any starting vertex the random walk will hit a bad vertex after polynomially 
number of steps. Note that the classical SAT problem corresponds to the special case 
in which the projectors have no 1/2 matrix-elements and hence there are no edges in 
the associated graph (and hence also no walk). 

7. Discussion. We hope that the stoquastic fc-SAT problem may potentially 

lead to new insights into the question whether MA = NP. Note that it is widely 
believed that MA=NP, see e.g. ^U\. Indeed, the simplified stoquastic fc-SAT problem 
described in Section 16.31 is the problem of deciding whether the associated graph 
G with 2" vertices has a connected component G" that contains only good vertices 
(the verifier can efficiently check whether a vertex is good). If the size of G" were 
polynomial, then a NP proof-system would suffice, since a prover can simply list all 
vertices in G". However in general the size of G" could be exponentially large and 
there is no time or space to explore or list the whole subgraph G' , hence the need for 
randomness. For 'yes'-instances the prover simply gives the verifier a vertex v £ G' 
and a random walk on G starting from v will always stay in G' . For 'no'-instances, 
the promise guarantees that no matter where one starts the random walk, with a 
polynomial number of steps one will always hit a bad vertex with high probability. 
The derandomization question is the question whether a pseudo-random walk from 
any starting vertex using a random bit string of length O(logn) will also hit a bad 
vertex with sufficiently high probability. 

Another open question is the simulatibility of stoquastic adiabatic computation 
in general. Given a stoquastic Hamiltonian H and its ground state satisfying 
H \ =0 (which can be always achieved by an energy shift) one can still use Eq. (|2.2p 
to define a random walk on the set S{ip). However, in order to simulate this random 
walk on a classical computer one must be able to compute the ratio of the amplitudes 
(ylip) / {x\ip) for which no efficient algorithm is known. Another possibility to define 
a random walk is to modify the verifier's protocol in Section [51 It suffices to modify 
Step 6 such that the walk stays at Xj with probability 1 whenever (xjlHajaij) = 0. An 
open question is whether the stationary distribution of this modified walk is anyhow 
related to the distribution tt{x) = {x\ip)'^ associated with a ground-state of the 
stoquastic Hamiltonian. 
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Appendix A. The complexity class MA (Merlin- Arthur games) was introduced 
by Babai in [22] . A language L is in MA iff there exists a probabilistic polynomial-time 
machine V (a verifier) that takes as input a pair {x, w) where x is string representing 
an instance of the problem, w is a witness string, and such that 

X Cz L ^ V accepts (a;, w) with probability 1 for some witness w. 

X <^ L ^ V accepts {x, w) with probability at most 1/3 for any witness w. 

One gets an equivalent definition if the acceptance probabilities 1 and 1/3 are 
replaced by Pyes and Pno such that pyes — Pno > ^/poly{n), see 123j. To better 
understand the relationship between MA and other complexity classes it is desirable 
to have some MA-complete problems, or at least, some problems in MA that are 
not known to be in NP. Unfortunately, no such problems are currently known. This 
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lack of interesting problems in MA is not very surprising though because probabilistic 
algorithms are usually allowed to give an inconclusive answer for some inputs (the 
acceptance probability is close to 1/2) while the definition above does not allow that. 
From this perspective it is more natural to define MA as a class of promise problems. 
Recall that a promise problem is a pair of non-intersecting sets Lyes^Lno ^ {0, 1}* 
that represent yes-instances and no-instances respectively. 

Definition 7.1. A promise problem {Lyes, Lno) belongs to MA iff there exists a 
probabilistic polynomial-time machine V taking as input a pair of strings (x, w) such 
that 

X G Lyes ^ y accepts (x, w) with probability 1 for some witness w. 
X £ Lno ^ y accepts {x, w) with probability at most 1/3 for any witness w. 

A promise problem {Lyes, Lno) is MA-complete iff for any promise problem {L'y^^, ^no) 
in MA there exists a function f : {0, 1}* — > {0, 1}* computable by a deterministic 
polynomial-time machine such that f{L'y^g) C Lyes cind f{L'^^^) C Lno- 

Note that the behavior of V on instances x ^ Lyes U Lno may be completely 
arbitrary. Throughout this paper MA refers to the class of promise problems rather 
than the class of languages. It should be mentioned that many important results 
concerning NP are formulated in terms of promise problems, for example, the inap- 
proximability version of the PCP theorem [24, or the complexity of fc-SAT with a 
unique solution [25] (see the survey [26] for other examples) . Thus one can also expect 
to get more insight in the complexity of MA by studying promise problems. 

Appendix B. This section serves three purposes. First, we prove Proposi- 
tion 11.51 Secondly, we prove the second part of Theorem 11.91 that is, MA-hardness 
of stoquastic 6-SAT. Thirdly, we explain in more details the connection between SFF 
Hamiltonians and classical probabilistic computation mentioned in Section 13.21 All 
these results follow directly from the clock Hamiltonian construction of [3 and the 
analysis performed in [2j [7] . 

We start form reviewing the clock Hamiltonian construction. Let U = Ul ■ ■ ■ U2U1 
be a quantum circuit acting on N data qubits with L — poly{N) gates. We assume that 
the N data qubits are partitioned into two groups: Na ancillary qubits and witness 
qubits (one may have = 0). Each ancillary qubit k is initialized by some pure state 
The witness qubits may be initialized by an arbitrary pure state j-^™**) S Q^^ . 
Accordingly, the input state of the circuit is \4>in) = 1-0""^) ® IV"™**)) where 
is a tensor product of the ancillary states \(j)k)- Let — Uj ■ ■ - Ui \ip°-"'^) (g) |V'™**), 
j = 0, . . . , i, be a state obtained by terminating the circuit after the j-th gate. We 
adopt a convention that \ijjo) — \4'in) is the input state. The output state of the 
circuit is 

Consider a composite system that consists of data qubits and L-\-l clock qubits. 
Let — ll^^^O^^-') e Q^+^ be the unary encoding of the time steps j = 0, . . . , L. 
Define a linear subspace H C Q^+^+i as 



States from Ti. represent computational paths of the verifier's quantum computer 
starting from an arbitrary witness state It/)™**). We shall label the j-th clock qubit 



L 




(7.1) 
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as cl{j), j = 0, . . . , L. Note that the clock qubit d(0) is always set to 1. For any 
j — 1, . . . , L, the clock qubit cl{j) is a flag telling whether the gate Uj has or has not 
been applied. The k-th ancillary qubit will be labeled a{k), k = 1, . . . , Na- Let us 
show that Ti. is spanned by ground states of some SFF Hamiltonian. Indeed, introduce 
3-qubit constraints 

(7.2) i?r* = {I-\(t>k){M)aik) ® |10)(10|,z(o),c/(l), J^k,...,Na, 

States satisfying these constraints (i.e. zero eigenvectors of H^"*) satisfy correct 
initial conditions. Introduce also constraints 

H^' = ^|l>(l|c/o-i) ® (|l>(l|dO-) + \0){0\ciu) 

(7.3) -\l){OUu) ® - \0){lUu) ® [/]) ® |0)(0|c;o-+i) 

where j — 1, . . . , L. States satisfying these constraints obey the correct propagation 
rules relating computational states at different time steps. Finally, introduce 2-qubit 
constraints 

i?o'°'' = |0>(0|ci(o), fff'°''-|01)(01|c/(i-i)xK0' l^h---,L. 

States satisfying these constraints belong to the subspace spanned by "legal" clock 
states, i.e., \j)c, j = 0, . . . , L. Therefore we arrive at 

n={\^)e : 10) = fff 10) = iJf'°^*'-|0) = for all j, k, l} . 

Define a clock Hamiltonian 

Na L L 

(7.4) H = J2 ^k"* + J2 ^T"" + H ^1^°'^- 

k=l j = l 1=0 

It follows that H is the ground-subspace of H. Note that all terms in H are pos- 
itive semi-definite and any vector from 7i is a zero eigenvector of H. Thus is a 
frustration-free Hamiltonian. 

Proof of Proposition ll.51 In the case of the adiabatic evolution there are no witness 
qubits, — 0. Accordingly, the clock Hamiltonian has a unique ground-state 

L 

|V') = (L + i)-i/^^|V',)®li)u. 

It was shown by many researchers, see for instance Lemma 3.11 in f5] and the improved 
estimates in [2L, that the spectral gap of the clock Hamiltonian can be bounded as 
A = r2(l/L^) = \/poly{N) regardless of the choice of the gates Ui, . . . ,Ul- Let us 
define a family of quantum circuits U{s) =^ Ul{s) ■ ■ ■ Ui{s) where < s < 1 and Uj{s) 
interpolates smoothly between Uj{0) ~ I and Uj(l) = Uj (without loss of generality 
det {Uj) = 1 in which case the possibility of such a smooth interpolation follows from 
the connectivity of the special unitary group). Applying definition Eq. (|7.4p we get 
a family of frustration-free clock Hamiltonians -ff(s), < s < 1 satisfying conditions 
(A1),(A2),(A3). Without loss of generality the last (1 — S)L gates of the circuit U are 
identity gates. Therefore the ground-state of H satisfies (V'IV'l (E) A) > 1 — S, where 
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\A) = (i + i)^^^^J2j=o \ j)y. ancillary state. Thus \ip) approximates the output 
state with precision 6 (after discarding the ancilla |^)). 

Stoquastic 6-SAT is MA- hard. It was shown in |7: (see Lemma 2 in [7]) that any 
classical MA verifier V can be transformed into a quantum verifier V' which uses a 
quantum circuit U involving only classical reversible gates (for example, the 3-qubit 
Toffoli gates) together with ancillary states |0), 1+), and measures one of the output 
qubits in the |0), |1) basis. This transformation has a property that the maximum 
acceptance probability of V (over all classical witnesses) is equal to the maximum 
acceptance probability of V' (over all quantum witnesses). In order to apply the clock 
Hamiltonian construction to V' we shall treat part of the ancillary qubits as the qubits 
encoding an instance of the problem, that is, we shall allow ancillas \(j>k) — |0), |1), |+). 
In addition, we shall add one more term into H representing the final measurement. 
Define a 3-qubit constraint 

Here Hout is the projector used by V' to decide whether he accepts the witness (say, 
Iloiit projects the first data qubit onto the state |0)). Note that H contains a vector 
satisfying n™*^"* iff the verifier V' accepts some witness state ji/;""*) with probability 
1. Define a system of constraints 

(7.5) C = {HlI^'^Hf"^, Jjclock^ jjraeas^ 

i.e. the system including all the constraints defined above. Since all ancillary states 
\4>k) are either |0) or |-|-), the off-diagonal matrix elements of the operators iJ™** are 
either or —1/2, see Eq. (|7.2p . Furthermore, since all gates Uj are classical Toffoli 
gates, the off-diagonal matrix elements of the operators Hj^°^ are either or —1/2, 
see Eq. Finally, the operators H"^""'' and iT^^as g^^.^ diagonal. Thus C is a 

stoquastic system of (n, 6)-constraints where n = N + L + 1. By definition, the 
unsat- value of C coincides with the smallest eigenvalue of a clock Hamiltonian 

(7.6) H' = H + H"''"'', 

where H is defined in Eq. (17. 4p . If V' accepts some witness state | with proba- 
bility 1 then unsat(C) = 0. On the other hand, if V accepts any witness state with 
probability at most 1 — e, the derivation of [3] implies that the smallest eigenvalue of 
the Hamiltonian Eq. (|7.6p can be bounded as 

Xr,^^n{H') > c(l - x/T^)^-^ > l/poly(N). 

where c is some positive constant. Thus in the latter case unsat(C) > l/poly{N). It 
follows that any problem in MA is reducible to the stoquastic 6-SAT problem. 

Finally, we remark that any constraint from the system C can be represented as 
/ — H where H is a non-negative projector with matrix elements belonging to the set 
{0,1,1/2}. 

Coherent probabilistic computation. The Hamiltonian mentioned in Section [3T2l 
is the clock Hamiltonian defined in Eq. (|7.4[) . The proof that the ground-state of H 
has the desired properties is completely analogous to the proof of Proposition 11.51 
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